Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft
File:                     lSamckeK-nVEXY0H3MV8BYlm7-I.mft (raw, json)
Hash identifier:          vC5OjbPvx3Gnxoozagxo6l+s87JbRFPbhy0dLWYr9LU=
Subject key identifier:   EA:4A:3F:BF:DF:96:FC:E5:5D:3B:5E:2E:D9:FE:20:DB:D7:B1:2B:A4
Authority key identifier: 95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2
Certificate issuer:       /CN=A91FA1BE/serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2
Certificate serial:       031B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft
Manifest number:          030D
Signing time:             Wed 19 Aug 2026 01:30:20 +0000
Manifest this update:     Wed 19 Aug 2026 01:30:19 +0000
Manifest next update:     Wed 26 Aug 2026 01:30:19 +0000
Files and hashes:         1: lSamckeK-nVEXY0H3MV8BYlm7-I.crl (hash: O5123d9Yq1E827h9BASuz5pOY67ub0koKeaXrcXGzlo=)
                          2: 6F46908C2D3411ED92165562C4F9AE02.roa (hash: zhPJuDjgckqRzGpF3JKmc3mqbX/Sm5NWxnx6UnLAwsM=)
                          3: 6E98B3182D3411ED92165562C4F9AE02.roa (hash: G3kaiurPfatRPZP7CqPIKbvlqsnpSEfzHgPDnICHiCk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl
                          rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 795 (0x31b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA1BE, serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2
        Validity
            Not Before: Aug 19 01:30:19 2026 GMT
            Not After : Aug 26 01:30:19 2026 GMT
        Subject: CN=6a85072b-c5b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fb:5e:c8:16:0a:f1:51:89:8d:8f:da:52:7d:
                    3c:93:d7:c2:ef:6d:4d:3d:1e:6b:ce:38:e3:f5:30:
                    59:e2:97:19:4c:5e:ae:9e:25:33:65:54:5f:15:4d:
                    98:6c:76:c3:b4:9c:b2:ae:28:8a:9b:eb:6a:cd:22:
                    e3:21:15:90:86:49:70:b9:01:32:cf:ce:5e:8b:1f:
                    39:73:95:3c:46:58:6d:4f:93:23:01:e0:ca:5c:56:
                    a8:f5:ae:38:66:3e:3f:92:e9:bc:f1:87:eb:1d:6a:
                    e4:b7:cf:c0:36:6e:e4:2a:94:e6:7e:8b:8c:46:ba:
                    66:d2:3d:7f:86:f0:59:e2:cf:ca:b9:0e:85:7a:33:
                    e2:b0:23:16:63:25:af:19:a7:c3:36:6d:19:45:23:
                    43:d1:ba:3b:e0:e0:0e:f9:0c:2f:34:19:19:74:46:
                    5d:ab:d2:de:27:50:b3:0d:5f:0c:3a:c0:25:48:9d:
                    da:f0:c6:00:09:c9:23:1b:5b:0b:23:07:21:bf:d7:
                    b2:3a:3c:b9:99:a0:39:49:bf:04:87:e7:f2:c6:58:
                    85:ca:d0:65:f9:c2:f7:68:63:d7:4e:36:06:5e:be:
                    6c:12:9c:52:83:c7:d1:68:e2:f8:b9:0a:81:dc:0f:
                    6e:4e:ae:50:14:71:44:a1:d4:3e:33:4e:7e:b5:33:
                    8f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4A:3F:BF:DF:96:FC:E5:5D:3B:5E:2E:D9:FE:20:DB:D7:B1:2B:A4
            X509v3 Authority Key Identifier:
                keyid:95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:ad:50:cc:c2:9d:91:f2:32:d9:c3:07:4f:56:fc:39:0f:76:
         76:02:29:9e:04:f5:2a:fb:41:b8:fa:ff:c0:52:fe:c9:a5:0d:
         40:31:39:c7:5e:2f:5e:69:e2:39:b1:dd:7d:63:a9:75:82:c1:
         f4:ab:8e:ff:09:28:89:6b:cd:b5:c3:1c:32:d0:40:71:72:75:
         aa:4f:bb:73:c7:39:2b:0a:69:8a:f6:af:ef:ee:a1:67:f7:b9:
         65:77:49:5f:04:01:d7:10:e1:e0:36:a6:ac:9e:02:db:2f:00:
         82:b0:ed:e9:12:2d:f4:9a:de:67:0b:38:38:f0:3f:d0:72:bf:
         74:19:cf:09:97:54:5f:ef:b3:48:f3:b8:8b:65:aa:92:e7:53:
         6a:f3:e1:80:ce:3f:44:24:c9:e7:6d:51:dc:28:8d:84:de:e0:
         30:ae:59:78:cd:3b:1b:05:10:80:f3:cd:75:04:63:9b:40:46:
         e6:5d:ba:e9:5b:ae:7d:83:1b:78:d4:07:64:c8:ec:2c:a3:10:
         0a:2d:4b:8f:96:34:40:b7:d7:ae:73:30:34:34:55:36:af:3d:
         03:2a:da:7a:ed:b9:49:03:a1:d0:ce:d8:1d:ea:75:a3:a4:19:
         d7:df:3c:ce:25:68:5f:4e:fe:92:ce:22:0d:ad:48:53:4c:cb:
         ce:35:2f:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkExQkUxMTAvBgNVBAUTKDk1MjZBNjcyNDc4QUZBNzU0NDVEOEQwN0RDQzU3QzA1
ODk2NkVGRTIwHhcNMjYwODE5MDEzMDE5WhcNMjYwODI2MDEzMDE5WjAYMRYwFAYD
VQQDEw02YTg1MDcyYi1jNWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxfteyBYK8VGJjY/aUn08k9fC721NPR5rzjjj9TBZ4pcZTF6uniUzZVRfFU2Y
bHbDtJyyriiKm+tqzSLjIRWQhklwuQEyz85eix85c5U8RlhtT5MjAeDKXFao9a44
Zj4/kum88YfrHWrkt8/ANm7kKpTmfouMRrpm0j1/hvBZ4s/KuQ6FejPisCMWYyWv
GafDNm0ZRSND0bo74OAO+QwvNBkZdEZdq9LeJ1CzDV8MOsAlSJ3a8MYACckjG1sL
Iwchv9eyOjy5maA5Sb8Eh+fyxliFytBl+cL3aGPXTjYGXr5sEpxSg8fRaOL4uQqB
3A9uTq5QFHFEodQ+M05+tTOPswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOpKP7/f
lvzlXTteLtn+INvXsSukMB8GA1UdIwQYMBaAFJUmpnJHivp1RF2NB9zFfAWJZu/i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTFCRS80MTY4RkY3NjJE
MzIxMUVEOTJCOEI3NjFDNEY5QUUwMi9sU2FtY2tlSy1uVkVYWTBIM01WOEJZbG03
LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xTYW1ja2VLLW5WRVhZMEgzTVY4QllsbTctSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QTFCRS80MTY4RkY3NjJEMzIxMUVEOTJCOEI3NjFDNEY5QUUwMi9sU2FtY2tlSy1u
VkVYWTBIM01WOEJZbG03LUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgK1QzMKdkfIy2cMHT1b8OQ92dgIpngT1KvtBuPr/wFL+yaUNQDE5x14vXmni
ObHdfWOpdYLB9KuO/wkoiWvNtcMcMtBAcXJ1qk+7c8c5Kwppivav7+6hZ/e5ZXdJ
XwQB1xDh4DamrJ4C2y8AgrDt6RIt9JreZws4OPA/0HK/dBnPCZdUX++zSPO4i2Wq
kudTavPhgM4/RCTJ521R3CiNhN7gMK5ZeM07GwUQgPPNdQRjm0BG5l266VuufYMb
eNQHZMjsLKMQCi1Lj5Y0QLfXrnMwNDRVNq89Ayraeu25SQOh0M7YHep1o6QZ1988
ziVoX07+ks4iDa1IU0zLzjUvXw==
-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:10 2026 by rpki-client